Dan Ehrlich Profile picture
Oct 4, 2021 33 tweets 27 min read Read on X
1/ - New week, new breach, and new thread. Previous week's thread can be found here: @epikfailleaks @davetroy @emilymolli @MikaelThalen
2/ - and also here: . Many of these are early conclusions and will change as the data becomes better and more sources come forward.
3/ - First revelation. @ClaremontInst and @CMCnews are hosting their Usenet group, new.claremont.edu, on @Giganews and #DataFoundry, who are being investigated for child pornography by the State of New Mexico and @Austin_Police: ladailypost.com/ag-balderas-ex…
4/ - Giganews / DataFoundry were also, inexplicably, hosting a series of @DHSgov fusion centers for #Netsential as revealed months ago by #BlueLeaks ... #DDoSecrets #EmmaBest @SilvermanJacob
6/ - Epik was doing billing through @whmcs. The history of shared web hosting (@cPanel) and reselling is replete with affiliate marketing scams and the like. As best I can tell, based on the logs, all hosting corps that bill through @whmcs are part of some yet undocumented
7/ - organized crime front. Also @ionCube @voxility @UK2 #epikfail #yopmail
8/ - "Masterbucks.com is a service of Amplifyx Holding Limited, an Epik company" @amplifyartists
9/ - 100.00% not money laundering #EpikFail Image
11/ - From the #PandoraPapers, @TridentTrustInt owns the domain "villamarina.com" via @Epik, and for 6 months between 2020 - 2021 hosted the domain on @natcoweb, which was implicated in the #SolarWinds hack @ICIJorg Image
12/ - Interesting GOP connections to Turkey here #iPipes #EpikFail ImageImage
13/ - Extensive hosting by @OANN on @EpikDotCom. Even the infamous and Ukranian based @natcoweb paging @br4dm4l0n3y ... Image
14/ - Very excellent thread for those poking around the Gitlab image:
16/ - @robmonster founded the company #GMI and led it until 2008 when he left to found @EpikDotCom. He still retains an active role. #GMI now operates as @Kantar, which is 50% @WPP and 50% @BainCapital (@BainAlerts). What is Rob Monster's association with the world's largest
17/ - advertising and data analytics conglomerate @WPP? @Michel1eH have you seen anything?
18/ - The head of #GMI today, which operates in parallel to or as a subsidiary to @Kantar (it is not clear), is the former Belarus Intelligence Officer of the Belarus KGB "Leonid Solodukhin". Leonid today lives in Lithuania, which would explain the .li TLD Image
19/ - of @EpikDotCom sister company @sibyl_ltd (sibyl.li). Further more, @robmonster, has previously worked very closely with either Chinese State Security or the PLA. This below recommendation he gave to Patrick Pun, now CEO of #NewCogs in Shanghai, is fascinating Image
20/ - Patrick Pun's CFO went to the esteemed Nanjing University of Science and Technology. Part of the "Seven Sons of National Defense". Incredible. Image
21/ - The rest of the executive team of NewCogs, which spun out of Rob Monster's #GMI, also has similar backgrounds. Why would Rob Monster, even if unknowingly, work w/ so many top level foreign intelligence and military officials from Russia, China, and Eastern Europe? @jxw8856 Image
22/ - Currently reading "The Domain Game: How People Get Rich From Internet Domain Names" by @davidkesmodel (former @WSJ) amazon.com/dp/1436332273/. A great primer on how a misfit band of Web 1.0 investors became a powerful mafia with links (we now know) to intelligence agencies.
23/ - @Frank_Schilling @tucows @Uniregistry. Keep in mind @tucows was founded by one of the founders of #RenaissanceTechnologies and good friend of #RobertMercer.
24/ - @Chick_in_Kiev "With his help, I found the Daily Stormer’s IP address, which turned out to be registered to a Canadian company called Frantech Solutions. It was here that I encountered Francisco Dias, the founder of Frantech and two affiliated companies, BuyVM & Buyshared"
25/ - "Through his companies, Dias rents out servers in Las Vegas, New Jersey, and Luxembourg—the last of which, according to BuyVM’s site, offers especially 'strong privacy and freedom of speech laws.'" ... @Chick_in_Kiev let me add one more city ... Cheyenne, WY @rocco_castoro
26/ - Nick Lim (of @EpikDotCom) runs @VanwaTech, and they only peers with 3 networks ... #FranTech is one of them. They are located in a building that comes up extensively in the Panama Papers as well in historic downtown Cheyenne: bgpview.io/asn/53667 Image
27/ - This network has been caught before distributing state sponsored malware in the US - bromium.com/mapping-malwar… @visitwyoming Image
28/ - S. Carolina links getting pretty interesting. Nikki Haley, her brother @gogirandhawa, his web design firm @msndrstdcreated, the web design firm behind serial murder /atty Alex Murdaugh's firm @BlueIon, and Russian weapons importer @PalmettoArmory: vanityfair.com/style/2021/10/…
29/ - @NikkiHaley of course too. Married to MAJ Michael Haley of @SCNationalGuard. Michael entered foster care as an infant, and was adopted at 4. From Ohio. When Haley was governor in 2012, a historically significant breach of SC Gov's database occurred: nytimes.com/2012/11/06/us/…
30/ - South Carolina attorney with ominous links to Russians, the 2012 hacking of SC servers, serial murdering, and embezzlement: vanityfair.com/style/2021/10/…
31/ - And what happened to the South Carolina governor before @NikkiHaley? @MarkSanford was mysteriously driven out of office after @007 - style sneaking out to Argentina for an affair ... or to meet his intel handlers ... or something: nytimes.com/2009/06/25/us/…
32/ - @MikaelThalen if you happen to get your hands on the @WeAreSinclair data in the next few days / weeks please do share :) Just need one more data set to round out what's been put together with the #EpikFail and @Twitch leaks: npr.org/2021/10/18/104…
33/ - [Holds revolvers up to face, puffs smoke away / out of each barrel. Holsters the weapons.]

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Dan Ehrlich

Dan Ehrlich Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @danehrlich11

May 24, 2022
Remember that @SpaceX was full of #TRW_Inc rocket scientists early on, such as @lrocket. You ever wonder where all the Operation Paperclip Nazi scientists who didn't go to @wsmisslerange in New Mexico or @NASA wound up? Well that would be at TRW Aerospace in Ohio ... Image
@peterthiel's grandfather is the great Nazi rocket scientist Adolf Karl Thiel: en.wikipedia.org/wiki/Adolf_Thi…. He had two sons, Chris or "Klaus" Thiel, and Michael Thiel. Klaus is indeed the real name of Peter Thiel's father.
Adolf Thiel, Walter Thiel (Adolf's older brother who would die during the massive RAF bombardment known as "Operation Hydra" in August of 1943), and others all worked closely with Werner Von Braun during the war and later in US. This is likely why Von Braun would dedicate
Read 8 tweets
Sep 30, 2021
1/ - The #EpikFail leak is unraveling a vast group of data centers across the world, all linked together, being used for some of the most sophisticated, technical, and subversive espionage that has been seen to date. And guess what else? @Snowden is showing up too.
2/ - Every single one of these IPs, from the alleged Operation BOUNDLESS INFORMANT program, peers directly or a single node removed from @Epik and their subsidiaries. What is going on? Image
3/ - I want to suggest that all @Snowden did was expose a foreign spying operation, being run in the US against the US, and as @TheJusticeDept & @ODNIgov closed in, they burned the program themselves & turned it around as an @NSAGov spy program for disinfo purposes. Clever.
Read 7 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(